@wrongstack/cli 0.300.0 → 0.302.0

package/dist/{chunk-V76R7DC5.js → chunk-3MOUBRKZ.js}

@@ -1,7 +1,7 @@
 import {
   LOCAL_LLM_PRESETS,
   runLiveProviderPicker
-} from "./chunk-PEMN4T5O.js";
+} from "./chunk-MT6FGXO3.js";
 import {
   openBrowser,
   runCodexOAuthLogin,
@@ -535,6 +535,10 @@ async function runOAuthLoginMenu(deps) {
   await runOAuthLoginChoice(deps, pick);
 }
 
+// src/auth-menu/local.ts
+import { color as color5 } from "@wrongstack/core/utils";
+import { DefaultSecretScrubber as DefaultSecretScrubber2 } from "@wrongstack/core/security";
+
 // src/auth-menu/helpers.ts
 async function loadProviders(deps) {
   return loadConfigProviders(deps.profileConfigPath, deps.vault, {
@@ -703,284 +707,7 @@ function validateFamily(raw) {
   return valid.includes(raw) ? raw : null;
 }
 
-// src/auth-menu/add-provider.ts
-import { atomicWrite, color as color5 } from "@wrongstack/core/utils";
-import { catalogProviderIdFor, PROVIDER_DEFINITIONS } from "@wrongstack/providers";
-import * as fs from "node:fs/promises";
-
-// src/provider-id.ts
-function nextCustomProviderId(existing) {
-  const taken = new Set(existing);
-  let n = 1;
-  while (taken.has(`custom-${n}`)) n++;
-  return `custom-${n}`;
-}
-
-// src/auth-menu/add-provider.ts
-function ownDefinitionsAsCatalog(known) {
-  return Object.values(PROVIDER_DEFINITIONS).filter((d) => !known.has(d.id) && d.family !== "unsupported" && d.usage !== "local").map((d) => ({
-    id: d.id,
-    name: d.name,
-    family: d.family,
-    envVars: [...d.envVars],
-    models: [],
-    // `discoveryOnlyBaseUrl` definitions keep their model-list URL out of the
-    // Base URL prompt: offering it as a default persists it as the provider's
-    // wire base, which is a different endpoint (see the AI Gateway entry).
-    ...d.baseUrl && !d.discoveryOnlyBaseUrl ? { apiBase: d.baseUrl } : {},
-    ...d.docsUrl ? { doc: d.docsUrl } : {}
-  }));
-}
-async function addFromCatalog(deps) {
-  let catalog = [];
-  try {
-    catalog = (await deps.modelsRegistry.listProviders()).filter((p) => p.family !== "unsupported");
-  } catch {
-    deps.renderer.writeWarning("Catalog unavailable \u2014 falling back to manual entry.\n");
-  }
-  if (catalog.length === 0) {
-    return addManualEntry(deps);
-  }
-  catalog = [...catalog, ...ownDefinitionsAsCatalog(new Set(catalog.map((p) => p.id)))];
-  const saved = new Set(Object.keys(await loadProviders(deps)));
-  deps.renderer.write(
-    color5.dim(
-      `  Catalog: ${catalog.length} providers. Type to filter, \u2191/\u2193 navigate, Enter to select.
-`
-    )
-  );
-  deps.renderer.write(`  ${color5.dim("\u25C9 already saved   \u25CB no key yet")}
-
-`);
-  renderOAuthLoginOptions(deps);
-  deps.renderer.write("\n");
-  const chosen = await runLiveProviderPicker(catalog, saved);
-  if (!chosen) {
-    deps.renderer.write(
-      `
-  ${color5.dim("OAuth login options:")} ${color5.dim("chatgpt")}, ${color5.dim("claude")}, or ${color5.dim("copilot")}?
-`
-    );
-    const answer = (await deps.reader.readLine(
-      `  ${color5.amber("?")} OAuth or q to quit ${color5.dim("[chatgpt/claude/copilot]")}: `
-    )).trim();
-    if (answer && await runOAuthLoginChoice(deps, answer, { allowNumeric: false })) {
-      return true;
-    }
-    return false;
-  }
-  return addKeyForCatalogProvider(deps, chosen);
-}
-async function addKeyForCatalogProvider(deps, chosen) {
-  deps.renderer.write(
-    color5.dim(`
-  Defaults from models.dev \u2014 press Enter to keep, or type overrides.
-`)
-  );
-  const famRaw = (await deps.reader.readLine(
-    `  ${color5.amber("?")} Family ${color5.dim(`[${chosen.family}]`)} ${color5.dim("(q to quit)")}: `
-  )).trim();
-  if (famRaw === "q") return false;
-  let family = chosen.family;
-  if (famRaw) {
-    const validated = validateFamily(famRaw);
-    if (!validated) {
-      deps.renderer.writeError(
-        `Invalid family: "${famRaw}" (must be: anthropic, openai, openai-compatible, google).`
-      );
-      return false;
-    }
-    family = validated;
-  }
-  const baseRaw = (await deps.reader.readLine(
-    `  ${color5.amber("?")} Base URL ${color5.dim(`[${chosen.apiBase ?? "unset"}]`)} ${color5.dim("(q to quit)")}: `
-  )).trim();
-  if (baseRaw === "q") return false;
-  const baseUrl = baseRaw || chosen.apiBase;
-  const providersNow = await loadProviders(deps);
-  let suggestedAlias = chosen.id;
-  if (family !== chosen.family) {
-    let candidate = `${chosen.id}-${family}`;
-    let n = 2;
-    while (providersNow[candidate]) {
-      candidate = `${chosen.id}-${family}-${n}`;
-      n++;
-    }
-    suggestedAlias = candidate;
-  }
-  const aliasRaw = (await deps.reader.readLine(
-    `  ${color5.amber("?")} Save as alias ${color5.dim(`[${suggestedAlias}]`)} ${color5.dim("(used with --provider <alias>)")}: `
-  )).trim();
-  const alias = aliasRaw || suggestedAlias;
-  const existing = providersNow[alias];
-  if (existing) {
-    const sameFamily = (existing.family ?? chosen.family) === family;
-    const sameBase = (existing.baseUrl ?? chosen.apiBase) === baseUrl;
-    if (!sameFamily || !sameBase) {
-      deps.renderer.writeError(
-        `Alias "${alias}" already exists with different family/baseUrl.
-  Existing: family=${existing.family ?? "(unset)"}, baseUrl=${existing.baseUrl ?? "(unset)"}
-  New:      family=${family}, baseUrl=${baseUrl ?? "(unset)"}
-  Pick a different alias to keep them separate.`
-      );
-      return false;
-    }
-  }
-  return addKeyForProvider(alias, deps, {
-    type: chosen.id,
-    family,
-    baseUrl,
-    envVars: chosen.envVars
-  });
-}
-async function addCustomProvider(deps) {
-  deps.renderer.write(
-    `
-${color5.bold("Custom provider")} ${color5.dim("\u2014 for local models or proxies not in the catalog.")}
-`
-  );
-  const providersNow = await loadProviders(deps);
-  const idRaw = (await deps.reader.readLine(
-    `  ${color5.amber("?")} Provider id ${color5.dim('(e.g. "local-llama", "my-proxy"; blank = auto custom-N, q to quit)')}: `
-  )).trim();
-  if (idRaw === "q") return false;
-  let type = idRaw;
-  if (!type) {
-    type = nextCustomProviderId(Object.keys(providersNow));
-    deps.renderer.write(`  ${color5.dim("Using generated id:")} ${color5.bold(type)}
-`);
-  } else if (providersNow[type]) {
-    deps.renderer.writeWarning(`"${type}" already exists. Pick it from the main menu to edit.`);
-    return false;
-  }
-  const familyRaw = (await deps.reader.readLine(
-    `  ${color5.amber("?")} Wire family ${color5.dim("(anthropic | openai | openai-compatible | google)")} ${color5.dim("(q to quit)")}: `
-  )).trim();
-  if (familyRaw === "q") return false;
-  const family = validateFamily(familyRaw);
-  if (!family) {
-    deps.renderer.writeError(`Invalid family: "${familyRaw}"`);
-    return false;
-  }
-  const baseUrl = (await deps.reader.readLine(
-    `  ${color5.amber("?")} Base URL ${color5.dim("(e.g. http://localhost:11434/v1, optional)")}: `
-  )).trim();
-  const modelsRaw = (await deps.reader.readLine(
-    `  ${color5.amber("?")} Model ids ${color5.dim("(comma-separated, optional)")}: `
-  )).trim();
-  const models = modelsRaw ? modelsRaw.split(",").map((s) => s.trim()).filter(Boolean) : void 0;
-  const envVarsRaw = (await deps.reader.readLine(
-    `  ${color5.amber("?")} Env var names ${color5.dim("(comma-separated, optional)")}: `
-  )).trim();
-  const envVars = envVarsRaw ? envVarsRaw.split(",").map((s) => s.trim()).filter(Boolean) : void 0;
-  return addKeyForProvider(type, deps, {
-    type,
-    family,
-    ...baseUrl ? { baseUrl } : {},
-    ...models ? { models } : {},
-    ...envVars ? { envVars } : {}
-  });
-}
-async function addManualEntry(deps) {
-  const pid = (await deps.reader.readLine(`  ${color5.amber("?")} Provider id ${color5.dim("[q to quit]")}: `)).trim();
-  if (!pid || pid === "q") return false;
-  const famRaw = (await deps.reader.readLine(
-    `  ${color5.amber("?")} Family ${color5.dim("(anthropic/openai/openai-compatible/google)")}: `
-  )).trim();
-  const family = validateFamily(famRaw);
-  if (!family) {
-    deps.renderer.writeError(`Invalid family: "${famRaw}"`);
-    return false;
-  }
-  const baseUrl = (await deps.reader.readLine(`  ${color5.amber("?")} Base URL ${color5.dim("(optional)")}: `)).trim();
-  return addKeyForProvider(pid, deps, {
-    type: pid,
-    family,
-    ...baseUrl ? { baseUrl } : {}
-  });
-}
-async function addKeyForProvider(providerId, deps, template) {
-  const providers = await loadProviders(deps);
-  const existing = providers[providerId];
-  const existingKeys = existing ? normalizeKeys(existing) : [];
-  const usedLabels = new Set(existingKeys.map((k) => k.label));
-  const label = await promptForLabel(deps, usedLabels);
-  if (!label) return false;
-  const apiKey = await readKeyInput(deps, `API key for ${providerId}/${label}`);
-  if (!apiKey) return false;
-  await mutateConfigProviders(deps.profileConfigPath, deps.vault, (all) => {
-    const existingProv = all[providerId] ?? {
-      type: providerId,
-      ...template
-    };
-    if (!existingProv.type) existingProv.type = providerId;
-    if (!existingProv.family && template.family) {
-      existingProv.family = template.family;
-    }
-    if (!existingProv.baseUrl && template.baseUrl) {
-      existingProv.baseUrl = template.baseUrl;
-    }
-    if (!existingProv.envVars && template.envVars) {
-      existingProv.envVars = template.envVars;
-    }
-    const list = normalizeKeys(existingProv);
-    list.push({ label, apiKey, createdAt: nowIso() });
-    writeKeysBack(existingProv, list);
-    if (!existingProv.activeKey) existingProv.activeKey = label;
-    all[providerId] = existingProv;
-  }, deps.profileConfigPath);
-  deps.renderer.write(
-    `  ${color5.green("\u2713")} Saved ${color5.bold(providerId)}/${color5.bold(label)}.
-`
-  );
-  deps.renderer.write(color5.dim(`  Launch: wstack --provider ${providerId} "<task>"
-`));
-  try {
-    await adoptAsDefaultIfUnset(deps, providerId, template);
-  } catch {
-  }
-  return true;
-}
-async function resolveDefaultModelId(deps, providerId, template) {
-  if (template.models && template.models.length > 0) return template.models[0];
-  const catalogId = catalogProviderIdFor(providerId, template.type);
-  const provider = await deps.modelsRegistry.getProvider(catalogId).catch(() => void 0);
-  return provider?.models?.[0]?.id;
-}
-async function adoptAsDefaultIfUnset(deps, providerId, template) {
-  const targetPath = deps.profileConfigPath;
-  let cfg = {};
-  try {
-    cfg = JSON.parse(await fs.readFile(targetPath, "utf8"));
-  } catch {
-  }
-  if (cfg["provider"] && cfg["model"]) return;
-  const modelId = await resolveDefaultModelId(deps, providerId, template);
-  if (!modelId) return;
-  cfg["provider"] = providerId;
-  cfg["model"] = modelId;
-  await atomicWrite(targetPath, JSON.stringify(cfg, null, 2), { mode: 384 });
-  deps.renderer.write(
-    `  ${color5.green("\u2713")} Set ${color5.bold(providerId)}/${color5.bold(modelId)} as the default.
-`
-  );
-}
-async function promptForLabel(deps, usedLabels) {
-  const defaultLabel = suggestLabel(usedLabels);
-  const labelRaw = (await deps.reader.readLine(
-    `  ${color5.amber("?")} Label for this key ${color5.dim(`[${defaultLabel}]`)}: `
-  )).trim();
-  const label = labelRaw || defaultLabel;
-  if (usedLabels.has(label)) {
-    deps.renderer.writeError(`Label "${label}" is already used. Use update (u) instead.`);
-    return null;
-  }
-  return label;
-}
-
 // src/auth-menu/local.ts
-import { color as color6 } from "@wrongstack/core/utils";
-import { DefaultSecretScrubber as DefaultSecretScrubber2 } from "@wrongstack/core/security";
 import { probeLocalLlm } from "@wrongstack/runtime/probe";
 
 // src/auth-menu/auth-menu-audit.ts
@@ -1097,7 +824,7 @@ async function runAuthLocal(deps, opts = {}) {
     if (!probe.ok) {
       if (chosen.noAuth) {
         deps.renderer.write(
-          color6.dim(
+          color5.dim(
             `  Saving ${chosen.label} anyway \u2014 keyless local gateway needs no key and discovers models when it comes up.
 `
           )
@@ -1106,7 +833,7 @@ async function runAuthLocal(deps, opts = {}) {
       } else {
         const saveAnyway = await promptSaveAnyway(deps);
         if (!saveAnyway) {
-          deps.renderer.write(color6.dim("  Cancelled. Nothing saved.\n"));
+          deps.renderer.write(color5.dim("  Cancelled. Nothing saved.\n"));
           return 0;
         }
         probeFailedAndSaved = true;
@@ -1164,19 +891,19 @@ async function runAuthLocal(deps, opts = {}) {
   }
   if (apiKey) {
     deps.renderer.write(
-      `  ${color6.green("\u2713")} Saved ${color6.bold(chosen.id)}/${color6.bold(finalLabel)} \u2192 ${color6.cyan(baseUrl)}
+      `  ${color5.green("\u2713")} Saved ${color5.bold(chosen.id)}/${color5.bold(finalLabel)} \u2192 ${color5.cyan(baseUrl)}
 `
     );
   } else {
     deps.renderer.write(
-      `  ${color6.green("\u2713")} Saved ${color6.bold(chosen.id)} (no key) \u2192 ${color6.cyan(baseUrl)}
+      `  ${color5.green("\u2713")} Saved ${color5.bold(chosen.id)} (no key) \u2192 ${color5.cyan(baseUrl)}
 `
     );
   }
   const firstModel = resolvedModels && resolvedModels.length > 0 ? resolvedModels[0] : null;
-  const modelHint = firstModel ? color6.cyan(firstModel) : color6.dim("<model-id>");
+  const modelHint = firstModel ? color5.cyan(firstModel) : color5.dim("<model-id>");
   deps.renderer.write(
-    color6.dim(
+    color5.dim(
       `  Launch: wstack --provider ${chosen.id} --model ${modelHint} "<task>"
 `
     )
@@ -1210,51 +937,51 @@ function resolveModelList(models, probe, scrubber) {
   return out;
 }
 function renderProbeResult(deps, probe, opts = {}) {
-  const label = opts.presetLabel ? ` ${color6.bold(opts.presetLabel)}` : "";
-  const elapsed = probe.elapsedMs !== void 0 ? ` ${color6.dim(`(${probe.elapsedMs}ms)`)}` : "";
+  const label = opts.presetLabel ? ` ${color5.bold(opts.presetLabel)}` : "";
+  const elapsed = probe.elapsedMs !== void 0 ? ` ${color5.dim(`(${probe.elapsedMs}ms)`)}` : "";
   switch (probe.status) {
     case "ok": {
-      const models = probe.modelCount !== void 0 ? color6.dim(`, ${probe.modelCount} model${probe.modelCount === 1 ? "" : "s"}`) : "";
+      const models = probe.modelCount !== void 0 ? color5.dim(`, ${probe.modelCount} model${probe.modelCount === 1 ? "" : "s"}`) : "";
       deps.renderer.write(
-        `  ${color6.green("\u25CF")} ${label} health probe ok${models}${elapsed}
+        `  ${color5.green("\u25CF")} ${label} health probe ok${models}${elapsed}
 `
       );
       break;
     }
     case "timeout": {
       deps.renderer.write(
-        `  ${color6.red("\u25CF")} ${label} health probe timed out${elapsed}
-    ${color6.dim("The server did not respond within the timeout.")}
-    ${color6.dim("Is the local server running? Check the port and try again.")}
+        `  ${color5.red("\u25CF")} ${label} health probe timed out${elapsed}
+    ${color5.dim("The server did not respond within the timeout.")}
+    ${color5.dim("Is the local server running? Check the port and try again.")}
 `
       );
       break;
     }
     case "unreachable": {
-      const detail = probe.detail ? ` ${color6.dim(`(${probe.detail})`)}` : "";
+      const detail = probe.detail ? ` ${color5.dim(`(${probe.detail})`)}` : "";
       deps.renderer.write(
-        `  ${color6.red("\u25CF")} ${label} server unreachable${detail}
-    ${color6.dim("Could not connect. Common causes:")}
-    ${color6.dim("  - The local server is not running")}
-    ${color6.dim("  - The port is blocked by a firewall")}
-    ${color6.dim("  - The base URL is wrong")}
+        `  ${color5.red("\u25CF")} ${label} server unreachable${detail}
+    ${color5.dim("Could not connect. Common causes:")}
+    ${color5.dim("  - The local server is not running")}
+    ${color5.dim("  - The port is blocked by a firewall")}
+    ${color5.dim("  - The base URL is wrong")}
 `
       );
       break;
     }
     case "http_error": {
       const status = probe.httpStatus !== void 0 ? ` HTTP ${probe.httpStatus}` : "";
-      const detail = probe.detail ? ` ${color6.dim(`\u2014 ${probe.detail}`)}` : "";
+      const detail = probe.detail ? ` ${color5.dim(`\u2014 ${probe.detail}`)}` : "";
       deps.renderer.write(
-        `  ${color6.yellow("\u25CF")} ${label} health probe got${status}${detail}
+        `  ${color5.yellow("\u25CF")} ${label} health probe got${status}${detail}
 `
       );
       break;
     }
     case "invalid_response": {
       deps.renderer.write(
-        `  ${color6.yellow("\u25CF")} ${label} health probe returned an unexpected shape
-` + (probe.detail ? `    ${color6.dim(probe.detail)}
+        `  ${color5.yellow("\u25CF")} ${label} health probe returned an unexpected shape
+` + (probe.detail ? `    ${color5.dim(probe.detail)}
 ` : "")
       );
       break;
@@ -1267,33 +994,33 @@ function renderProbeResult(deps, probe, opts = {}) {
 async function promptSaveAnyway(deps) {
   const answer = (await deps.reader.readLine(
     `
-${color6.amber("?")} ${color6.bold("Save anyway?")} ${color6.dim("[y/N]")}: `
+${color5.amber("?")} ${color5.bold("Save anyway?")} ${color5.dim("[y/N]")}: `
   )).trim().toLowerCase();
   return answer === "y" || answer === "yes";
 }
 async function pickLocalPreset(deps) {
   deps.renderer.write(
     `
-${color6.bold("Local LLM servers")} ${color6.dim("\u2014 pick one to pre-fill the base URL")}
+${color5.bold("Local LLM servers")} ${color5.dim("\u2014 pick one to pre-fill the base URL")}
 
 `
   );
   let idx = 1;
   for (const entry of LOCAL_LLM_PRESETS) {
-    const auth = entry.noAuth ? color6.dim("(no auth)") : color6.dim("(optional auth)");
+    const auth = entry.noAuth ? color5.dim("(no auth)") : color5.dim("(optional auth)");
     deps.renderer.write(
-      `    ${color6.dim(`${idx}.`.padStart(4))} ${color6.bold(entry.label.padEnd(12))} ${color6.cyan(entry.defaultBaseUrl.padEnd(34))} ${auth}
+      `    ${color5.dim(`${idx}.`.padStart(4))} ${color5.bold(entry.label.padEnd(12))} ${color5.cyan(entry.defaultBaseUrl.padEnd(34))} ${auth}
 `
     );
     deps.renderer.write(
-      `        ${color6.dim(entry.hint)}
+      `        ${color5.dim(entry.hint)}
 `
     );
     idx++;
   }
   const answer = (await deps.reader.readLine(
     `
-${color6.amber("?")} Pick ${color6.dim(`(1-${LOCAL_LLM_PRESETS.length}, q to quit)`)}: `
+${color5.amber("?")} Pick ${color5.dim(`(1-${LOCAL_LLM_PRESETS.length}, q to quit)`)}: `
   )).trim().toLowerCase();
   if (!answer || answer === "q" || answer === "quit") return void 0;
   const num = Number.parseInt(answer, 10);
@@ -1307,12 +1034,287 @@ ${color6.amber("?")} Pick ${color6.dim(`(1-${LOCAL_LLM_PRESETS.length}, q to qui
 }
 async function promptOptionalKey(deps, preset) {
   const answer = (await deps.reader.readSecret(
-    `  ${color6.amber("?")} ${color6.bold(preset.label)} API key ${color6.dim("(hidden \u2014 Enter to skip if auth is disabled on the server)")}: `
+    `  ${color5.amber("?")} ${color5.bold(preset.label)} API key ${color5.dim("(hidden \u2014 Enter to skip if auth is disabled on the server)")}: `
   )).trim();
   if (!answer) return void 0;
   return answer;
 }
 
+// src/auth-menu/add-provider.ts
+import { atomicWrite, color as color6 } from "@wrongstack/core/utils";
+import { catalogProviderIdFor, PROVIDER_DEFINITIONS } from "@wrongstack/providers";
+import * as fs from "node:fs/promises";
+
+// src/provider-id.ts
+function nextCustomProviderId(existing) {
+  const taken = new Set(existing);
+  let n = 1;
+  while (taken.has(`custom-${n}`)) n++;
+  return `custom-${n}`;
+}
+
+// src/auth-menu/add-provider.ts
+function ownDefinitionsAsCatalog(known) {
+  return Object.values(PROVIDER_DEFINITIONS).filter((d) => !known.has(d.id) && d.family !== "unsupported" && d.usage !== "local").map((d) => ({
+    id: d.id,
+    name: d.name,
+    family: d.family,
+    envVars: [...d.envVars],
+    models: [],
+    // `discoveryOnlyBaseUrl` definitions keep their model-list URL out of the
+    // Base URL prompt: offering it as a default persists it as the provider's
+    // wire base, which is a different endpoint (see the AI Gateway entry).
+    ...d.baseUrl && !d.discoveryOnlyBaseUrl ? { apiBase: d.baseUrl } : {},
+    ...d.docsUrl ? { doc: d.docsUrl } : {}
+  }));
+}
+async function addFromCatalog(deps) {
+  let catalog = [];
+  try {
+    catalog = (await deps.modelsRegistry.listProviders()).filter((p) => p.family !== "unsupported");
+  } catch {
+    deps.renderer.writeWarning("Catalog unavailable \u2014 falling back to manual entry.\n");
+  }
+  if (catalog.length === 0) {
+    return addManualEntry(deps);
+  }
+  catalog = [...catalog, ...ownDefinitionsAsCatalog(new Set(catalog.map((p) => p.id)))];
+  const saved = new Set(Object.keys(await loadProviders(deps)));
+  deps.renderer.write(
+    color6.dim(
+      `  Catalog: ${catalog.length} providers. Type to filter, \u2191/\u2193 navigate, Enter to select.
+`
+    )
+  );
+  deps.renderer.write(`  ${color6.dim("\u25C9 already saved   \u25CB no key yet")}
+
+`);
+  renderOAuthLoginOptions(deps);
+  deps.renderer.write("\n");
+  const chosen = await runLiveProviderPicker(catalog, saved);
+  if (!chosen) {
+    deps.renderer.write(
+      `
+  ${color6.dim("OAuth login options:")} ${color6.dim("chatgpt")}, ${color6.dim("claude")}, or ${color6.dim("copilot")}?
+`
+    );
+    const answer = (await deps.reader.readLine(
+      `  ${color6.amber("?")} OAuth or q to quit ${color6.dim("[chatgpt/claude/copilot]")}: `
+    )).trim();
+    if (answer && await runOAuthLoginChoice(deps, answer, { allowNumeric: false })) {
+      return true;
+    }
+    return false;
+  }
+  return addKeyForCatalogProvider(deps, chosen);
+}
+async function addKeyForCatalogProvider(deps, chosen) {
+  deps.renderer.write(
+    color6.dim(`
+  Defaults from models.dev \u2014 press Enter to keep, or type overrides.
+`)
+  );
+  const famRaw = (await deps.reader.readLine(
+    `  ${color6.amber("?")} Family ${color6.dim(`[${chosen.family}]`)} ${color6.dim("(q to quit)")}: `
+  )).trim();
+  if (famRaw === "q") return false;
+  let family = chosen.family;
+  if (famRaw) {
+    const validated = validateFamily(famRaw);
+    if (!validated) {
+      deps.renderer.writeError(
+        `Invalid family: "${famRaw}" (must be: anthropic, openai, openai-compatible, google).`
+      );
+      return false;
+    }
+    family = validated;
+  }
+  const baseRaw = (await deps.reader.readLine(
+    `  ${color6.amber("?")} Base URL ${color6.dim(`[${chosen.apiBase ?? "unset"}]`)} ${color6.dim("(q to quit)")}: `
+  )).trim();
+  if (baseRaw === "q") return false;
+  const baseUrl = baseRaw || chosen.apiBase;
+  const providersNow = await loadProviders(deps);
+  let suggestedAlias = chosen.id;
+  if (family !== chosen.family) {
+    let candidate = `${chosen.id}-${family}`;
+    let n = 2;
+    while (providersNow[candidate]) {
+      candidate = `${chosen.id}-${family}-${n}`;
+      n++;
+    }
+    suggestedAlias = candidate;
+  }
+  const aliasRaw = (await deps.reader.readLine(
+    `  ${color6.amber("?")} Save as alias ${color6.dim(`[${suggestedAlias}]`)} ${color6.dim("(used with --provider <alias>)")}: `
+  )).trim();
+  const alias = aliasRaw || suggestedAlias;
+  const existing = providersNow[alias];
+  if (existing) {
+    const sameFamily = (existing.family ?? chosen.family) === family;
+    const sameBase = (existing.baseUrl ?? chosen.apiBase) === baseUrl;
+    if (!sameFamily || !sameBase) {
+      deps.renderer.writeError(
+        `Alias "${alias}" already exists with different family/baseUrl.
+  Existing: family=${existing.family ?? "(unset)"}, baseUrl=${existing.baseUrl ?? "(unset)"}
+  New:      family=${family}, baseUrl=${baseUrl ?? "(unset)"}
+  Pick a different alias to keep them separate.`
+      );
+      return false;
+    }
+  }
+  return addKeyForProvider(alias, deps, {
+    type: chosen.id,
+    family,
+    baseUrl,
+    envVars: chosen.envVars
+  });
+}
+async function addCustomProvider(deps) {
+  deps.renderer.write(
+    `
+${color6.bold("Custom provider")} ${color6.dim("\u2014 for local models or proxies not in the catalog.")}
+`
+  );
+  const providersNow = await loadProviders(deps);
+  const idRaw = (await deps.reader.readLine(
+    `  ${color6.amber("?")} Provider id ${color6.dim('(e.g. "local-llama", "my-proxy"; blank = auto custom-N, q to quit)')}: `
+  )).trim();
+  if (idRaw === "q") return false;
+  let type = idRaw;
+  if (!type) {
+    type = nextCustomProviderId(Object.keys(providersNow));
+    deps.renderer.write(`  ${color6.dim("Using generated id:")} ${color6.bold(type)}
+`);
+  } else if (providersNow[type]) {
+    deps.renderer.writeWarning(`"${type}" already exists. Pick it from the main menu to edit.`);
+    return false;
+  }
+  const familyRaw = (await deps.reader.readLine(
+    `  ${color6.amber("?")} Wire family ${color6.dim("(anthropic | openai | openai-compatible | google)")} ${color6.dim("(q to quit)")}: `
+  )).trim();
+  if (familyRaw === "q") return false;
+  const family = validateFamily(familyRaw);
+  if (!family) {
+    deps.renderer.writeError(`Invalid family: "${familyRaw}"`);
+    return false;
+  }
+  const baseUrl = (await deps.reader.readLine(
+    `  ${color6.amber("?")} Base URL ${color6.dim("(e.g. http://localhost:11434/v1, optional)")}: `
+  )).trim();
+  const modelsRaw = (await deps.reader.readLine(
+    `  ${color6.amber("?")} Model ids ${color6.dim("(comma-separated, optional)")}: `
+  )).trim();
+  const models = modelsRaw ? modelsRaw.split(",").map((s) => s.trim()).filter(Boolean) : void 0;
+  const envVarsRaw = (await deps.reader.readLine(
+    `  ${color6.amber("?")} Env var names ${color6.dim("(comma-separated, optional)")}: `
+  )).trim();
+  const envVars = envVarsRaw ? envVarsRaw.split(",").map((s) => s.trim()).filter(Boolean) : void 0;
+  return addKeyForProvider(type, deps, {
+    type,
+    family,
+    ...baseUrl ? { baseUrl } : {},
+    ...models ? { models } : {},
+    ...envVars ? { envVars } : {}
+  });
+}
+async function addManualEntry(deps) {
+  const pid = (await deps.reader.readLine(`  ${color6.amber("?")} Provider id ${color6.dim("[q to quit]")}: `)).trim();
+  if (!pid || pid === "q") return false;
+  const famRaw = (await deps.reader.readLine(
+    `  ${color6.amber("?")} Family ${color6.dim("(anthropic/openai/openai-compatible/google)")}: `
+  )).trim();
+  const family = validateFamily(famRaw);
+  if (!family) {
+    deps.renderer.writeError(`Invalid family: "${famRaw}"`);
+    return false;
+  }
+  const baseUrl = (await deps.reader.readLine(`  ${color6.amber("?")} Base URL ${color6.dim("(optional)")}: `)).trim();
+  return addKeyForProvider(pid, deps, {
+    type: pid,
+    family,
+    ...baseUrl ? { baseUrl } : {}
+  });
+}
+async function addKeyForProvider(providerId, deps, template) {
+  const providers = await loadProviders(deps);
+  const existing = providers[providerId];
+  const existingKeys = existing ? normalizeKeys(existing) : [];
+  const usedLabels = new Set(existingKeys.map((k) => k.label));
+  const label = await promptForLabel(deps, usedLabels);
+  if (!label) return false;
+  const apiKey = await readKeyInput(deps, `API key for ${providerId}/${label}`);
+  if (!apiKey) return false;
+  await mutateConfigProviders(deps.profileConfigPath, deps.vault, (all) => {
+    const existingProv = all[providerId] ?? {
+      type: providerId,
+      ...template
+    };
+    if (!existingProv.type) existingProv.type = providerId;
+    if (!existingProv.family && template.family) {
+      existingProv.family = template.family;
+    }
+    if (!existingProv.baseUrl && template.baseUrl) {
+      existingProv.baseUrl = template.baseUrl;
+    }
+    if (!existingProv.envVars && template.envVars) {
+      existingProv.envVars = template.envVars;
+    }
+    const list = normalizeKeys(existingProv);
+    list.push({ label, apiKey, createdAt: nowIso() });
+    writeKeysBack(existingProv, list);
+    if (!existingProv.activeKey) existingProv.activeKey = label;
+    all[providerId] = existingProv;
+  }, deps.profileConfigPath);
+  deps.renderer.write(
+    `  ${color6.green("\u2713")} Saved ${color6.bold(providerId)}/${color6.bold(label)}.
+`
+  );
+  deps.renderer.write(color6.dim(`  Launch: wstack --provider ${providerId} "<task>"
+`));
+  try {
+    await adoptAsDefaultIfUnset(deps, providerId, template);
+  } catch {
+  }
+  return true;
+}
+async function resolveDefaultModelId(deps, providerId, template) {
+  if (template.models && template.models.length > 0) return template.models[0];
+  const catalogId = catalogProviderIdFor(providerId, template.type);
+  const provider = await deps.modelsRegistry.getProvider(catalogId).catch(() => void 0);
+  return provider?.models?.[0]?.id;
+}
+async function adoptAsDefaultIfUnset(deps, providerId, template) {
+  const targetPath = deps.profileConfigPath;
+  let cfg = {};
+  try {
+    cfg = JSON.parse(await fs.readFile(targetPath, "utf8"));
+  } catch {
+  }
+  if (cfg["provider"] && cfg["model"]) return;
+  const modelId = await resolveDefaultModelId(deps, providerId, template);
+  if (!modelId) return;
+  cfg["provider"] = providerId;
+  cfg["model"] = modelId;
+  await atomicWrite(targetPath, JSON.stringify(cfg, null, 2), { mode: 384 });
+  deps.renderer.write(
+    `  ${color6.green("\u2713")} Set ${color6.bold(providerId)}/${color6.bold(modelId)} as the default.
+`
+  );
+}
+async function promptForLabel(deps, usedLabels) {
+  const defaultLabel = suggestLabel(usedLabels);
+  const labelRaw = (await deps.reader.readLine(
+    `  ${color6.amber("?")} Label for this key ${color6.dim(`[${defaultLabel}]`)}: `
+  )).trim();
+  const label = labelRaw || defaultLabel;
+  if (usedLabels.has(label)) {
+    deps.renderer.writeError(`Label "${label}" is already used. Use update (u) instead.`);
+    return null;
+  }
+  return label;
+}
+
 export {
   loadProviders,
   renderProviderHeader,
@@ -1333,4 +1335,4 @@ export {
   addKeyForProvider,
   runAuthLocal
 };
-//# sourceMappingURL=chunk-V76R7DC5.js.map
+//# sourceMappingURL=chunk-3MOUBRKZ.js.map